CVE-2020-13969: Crk Business Platform

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

CRK Business Platform <= 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter. This is path-independent.

Affected products

• Crk Business Platform: up to and including 2019.1

Published 2020-12-23. Last modified 2026-06-17.